CVE-2015-1454: Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does n...

Security readout for executives and security teams

This flaw affects older Blue Coat endpoint proxy agents that failed to properly validate certain certificates. An attacker positioned to intercept traffic could impersonate a ProxySG Client Manager, change client configuration, and cause arbitrary software updates to run. The supplied sources do not provide CVSS, CWE, or active exploitation evidence. Exposure is likely limited to environments still running Blue Coat ProxyClient before 3.3.3.3, ProxyClient 3.4.x before 3.4.4.10, or Unified Agent before 4.1.3.151952. Risk is highest where agents communicate over networks where interception is plausible. Treat as high priority only if these legacy Blue Coat agents remain deployed. The business risk is endpoint control-plane compromise through intercepted management traffic, not a broadly confirmed internet-wide campaign in the supplied evidence. Mitigation focus: Upgrade ProxyClient to 3.3.3.3 or later where applicable.; Upgrade ProxyClient 3.4.x to 3.4.4.10 or later.; Upgrade Unified Agent to 4.1.3.151952 or later..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.